Consider the following scenario:
3-Oct-2013: Domain Admin created a new user called NBU_User inside HQ_Users organizational unit (OU). The distinguished name looked like this:
4-Oct-2013: NetBackup Admin ran AD GRT backup.
5-Oct-2013: Domain Admin moved NBU_User from HQ_Users to HQ_Administrators OU.
6-Oct-2013: Domain Admin deleted NBU_User from Active Directory.
7-Oct-2013: Now he needed the user back.
7-Oct-2013: NetBackup Admin performed AD GRT Restore. The user object did get created again, but without attributes.
The restore itself failed:
MS-Windows policy restore...